yarn-why-duplicate 1.2.0 → 2.2.1

package/LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2024 Christophe Hurpeau <christophe@hurpeau.com> (https://christophe.hurpeau.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/README.md

@@ -1,16 +1,16 @@
-<h3 align="center">
+<h1 align="center">
   yarn-why-duplicate
-</h3>
+</h1>
 
 <p align="center">
   Simple bin to know why a package is duplicated
 </p>
 
 <p align="center">
-  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/v/yarn-why-duplicate.svg?style=flat-square"></a>
-  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/dw/yarn-why-duplicate.svg?style=flat-square"></a>
-  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/node/v/yarn-why-duplicate.svg?style=flat-square"></a>
-  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/types/yarn-why-duplicate.svg?style=flat-square"></a>
+  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/v/yarn-why-duplicate.svg?style=flat-square" alt="npm version"></a>
+  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/dw/yarn-why-duplicate.svg?style=flat-square" alt="npm downloads"></a>
+  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/node/v/yarn-why-duplicate.svg?style=flat-square" alt="node version"></a>
+  <a href="https://npmjs.org/package/yarn-why-duplicate"><img src="https://img.shields.io/npm/types/yarn-why-duplicate.svg?style=flat-square" alt="types"></a>
 </p>
 
 ## Usage
@@ -20,3 +20,50 @@ With yarn berry:
 ```
 yarn dlx yarn-why-duplicate <dependencyName>
 ```
+
+One package name, no flags. It runs `yarn why <dependencyName> --json` in the
+working directory, groups the answer by resolved version, and prints each
+version with the dependents that asked for it and the range they asked with:
+
+```
+Found 2 versions:
+
+semver@npm:7.8.5
+- eslint@npm:10.4.0 (semver@npm:^7.6.3)
+- ts-api-utils@npm:2.1.0 (semver@npm:^7.7.1)
+
+semver@npm:6.3.1
+- @babel/core@npm:7.28.4 (semver@npm:^6.3.1)
+```
+
+`No version found` means yarn reported nothing for that name — usually a typo,
+or a package that is not in the tree.
+
+Requires yarn berry (>= 2): yarn 1's `yarn why` output is a different format and
+is rejected with an explicit message rather than misparsed. Exits 1 on that and
+on any error yarn reports.
+
+### Prefer yarn-berry-why-duplicate
+
+This is the original tool, kept working and unchanged. It shells out to
+`yarn why`, so it explains one package at a time, spawns yarn per run, and knows
+nothing about lockstep families or about fixing anything.
+
+[yarn-berry-why-duplicate](../yarn-berry-deduplicate) reads `yarn.lock` directly
+and is what to reach for now: it lists every duplicate at once, takes globs and
+package filters, reports the lockstep clusters, tells you which copies can be
+merged — and its sibling `yarn-berry-deduplicate` applies the merges.
+
+## Notes
+
+- CLI only: there is no importable API. The `exports` map only exposes
+  `./package.json`, so `import "yarn-why-duplicate"` fails by design. Internally
+  the bin is three steps,
+  `readAndParseYarnWhy` → `identifyDuplicates` → `displayDuplicates`, each in
+  its own file under `lib/` and each unit-tested against recorded `yarn why`
+  output in `test/fixtures/`.
+- Plain JavaScript, no TypeScript and no build; node `>=22.18.0`.
+- `Found N versions` counts every version of the named package, duplicated or
+  not — one version is a normal answer, not an error.
+- Colors and descriptor formatting come from `@yarnpkg/core`, configured from
+  the working directory, so output matches what yarn itself prints.

package/bin/yarn-why-duplicate.mjs

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 
-import { displayDuplicates } from '../lib/displayDuplicates.js';
-import { identifyDuplicates } from '../lib/identifyDuplicates.js';
-import { readAndParseYarnWhy } from '../lib/readAndParseYarnWhy.js';
+import { displayDuplicates } from "../lib/displayDuplicates.js";
+import { identifyDuplicates } from "../lib/identifyDuplicates.js";
+import { readAndParseYarnWhy } from "../lib/readAndParseYarnWhy.js";
 
 const pkgName = process.argv.slice(2)[0];
 
 const yarnWhyResult = readAndParseYarnWhy(pkgName);
 
 for (const line of yarnWhyResult) {
-  if (line.type === 'error') {
+  if (line.type === "error") {
     console.error(`yarn error: ${line.data}`);
     process.exit(1);
-  } else if (line.type === 'step') {
-    console.error('yarn 1 is not supported, use yarn berry (>=2)');
+  } else if (line.type === "step") {
+    console.error("yarn 1 is not supported, use yarn berry (>=2)");
     process.exit(1);
   }
 }

package/lib/displayDuplicates.js

@@ -1,4 +1,4 @@
-import { structUtils, Configuration } from '@yarnpkg/core';
+import { Configuration, structUtils } from "@yarnpkg/core";
 
 export const displayDuplicates = (
   groupByVersions,
@@ -6,13 +6,13 @@ export const displayDuplicates = (
   configuration = Configuration.create(process.cwd()),
 ) => {
   if (groupByVersions.length === 0) {
-    log('No version found');
+    log("No version found");
     return;
   }
 
   log(
     `Found ${groupByVersions.length} version${
-      groupByVersions.length === 1 ? '' : 's'
+      groupByVersions.length === 1 ? "" : "s"
     }:`,
   );
   log();
@@ -25,7 +25,7 @@ export const displayDuplicates = (
           configuration,
           source,
         )} (${structUtils.prettyDescriptor(configuration, descriptor)})`,
-      ); // TODO prettyDescriptor from structUtils
+      );
     }
     log();
   }

package/lib/identifyDuplicates.js

@@ -1,5 +1,5 @@
-import { structUtils } from '@yarnpkg/core';
-import { compare as compareRange } from 'semver';
+import { structUtils } from "@yarnpkg/core";
+import { compare as compareRange } from "semver";
 
 export const identifyDuplicates = (yarnWhyResult) => {
   const groupByVersions = new Map();

package/lib/readAndParseYarnWhy.js

@@ -1,16 +1,16 @@
-import { spawnSync } from 'child_process';
+import { spawnSync } from "node:child_process";
 
 export const parseYarnWhy = (content) => {
   return content
-    .split('\n')
+    .split("\n")
     .filter(Boolean)
     .map((line) => JSON.parse(line));
 };
 
 export const readAndParseYarnWhy = (pkgName) => {
-  const { stdout, stderr } = spawnSync('yarn', ['why', pkgName, '--json'], {
-    encoding: 'utf8',
-    stdio: 'pipe',
+  const { stdout, stderr } = spawnSync("yarn", ["why", pkgName, "--json"], {
+    encoding: "utf8",
+    stdio: "pipe",
     pwd: process.cwd(),
   });
   if (stderr) {

package/package.json

@@ -1,58 +1,44 @@
 {
   "name": "yarn-why-duplicate",
-  "version": "1.2.0",
+  "version": "2.2.1",
   "description": "Simple bin to know why a package is duplicated",
   "keywords": [
-    "yarn",
-    "berry"
+    "berry",
+    "yarn"
   ],
-  "author": "Christophe Hurpeau <christophe@hurpeau.com> (https://christophe.hurpeau.com)",
-  "license": "ISC",
-  "repository": "https://github.com/christophehurpeau/yarn-why-duplicate.git",
-  "homepage": "https://github.com/christophehurpeau/yarn-why-duplicate#readme",
+  "homepage": "https://github.com/christophehurpeau/pm-tools",
   "bugs": {
-    "url": "https://github.com/christophehurpeau/yarn-why-duplicate/issues"
+    "url": "https://github.com/christophehurpeau/pm-tools/issues"
   },
-  "type": "module",
-  "engines": {
-    "node": ">=18.0.0"
+  "license": "MIT",
+  "author": "Christophe Hurpeau <christophe@hurpeau.com> (https://christophe.hurpeau.com)",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/christophehurpeau/pm-tools.git",
+    "directory": "packages/yarn-why-duplicate"
   },
-  "packageManager": "yarn@3.5.0",
-  "main": "./lib/index.js",
+  "bin": "./bin/yarn-why-duplicate.mjs",
+  "files": [
+    "lib",
+    "bin"
+  ],
+  "type": "module",
+  "sideEffects": false,
   "exports": {
-    ".": "./lib/index.js",
     "./package.json": "./package.json"
   },
-  "sideEffects": false,
-  "bin": "./bin/yarn-why-duplicate.mjs",
   "scripts": {
-    "checks": "node scripts/check-package.js",
-    "clean:build": "true",
-    "lint": "yarn run lint:prettier && yarn run lint:eslint",
-    "lint:eslint": "eslint --report-unused-disable-directives --resolve-plugins-relative-to . --quiet *.{js,cjs,mjs} lib bin scripts",
-    "lint:prettier": "pob-root-prettier --check .",
-    "lint:prettier:fix": "pob-root-prettier --write .",
-    "postinstallDev": "pob-root-postinstall",
-    "test": "node --test",
-    "test:coverage": "node --test",
-    "test:watch": "node --test --watch"
+    "lint": "bun run lint:oxlint && bun run lint:eslint",
+    "lint:eslint": "bun run --cwd '../..' eslint --quiet 'packages/yarn-why-duplicate'",
+    "lint:oxlint": "bun run --cwd '../..' oxlint --quiet 'packages/yarn-why-duplicate'",
+    "test": "bun run --cwd '../..' test -- 'packages/yarn-why-duplicate'"
   },
-  "prettier": "@pob/root/prettier-config",
-  "commitlint": {
-    "extends": [
-      "@pob/commitlint-config"
-    ]
-  },
-  "pob": {},
   "dependencies": {
-    "@yarnpkg/core": "4.0.0-rc.42",
-    "semver": "7.5.0"
+    "@yarnpkg/core": "4.9.2",
+    "semver": "7.8.5"
+  },
+  "engines": {
+    "node": ">=22.18.0"
   },
-  "devDependencies": {
-    "@pob/commitlint-config": "5.1.1",
-    "@pob/eslint-config": "50.0.4",
-    "@pob/root": "7.8.0",
-    "check-package-dependencies": "6.3.2",
-    "eslint": "8.39.0"
-  }
+  "pob": {}
 }

package/.editorconfig

@@ -1,13 +0,0 @@
-# EditorConfig helps developers define and maintain consistent
-# coding styles between different editors and IDEs
-# http://editorconfig.org
-
-root = true
-
-[*]
-indent_style = space
-indent_size = 2
-end_of_line = lf
-charset = utf-8
-trim_trailing_whitespace = true
-insert_final_newline = true

package/.eslintrc.json

@@ -1,4 +0,0 @@
-{
-  "root": true,
-  "extends": ["@pob/eslint-config/root-module"]
-}

package/.prettierignore

@@ -1,2 +0,0 @@
-CHANGELOG.md
-/.yarn/**/*

package/CHANGELOG.md

@@ -1,30 +0,0 @@
-# Changelog
-
-## [1.2.0](https://github.com/christophehurpeau/yarn-why-duplicate/compare/v1.1.0...v1.2.0) (2023-04-25)
-
-
-### Features
-
-* force 1.2.0 ([72688d8](https://github.com/christophehurpeau/yarn-why-duplicate/commit/72688d83af568ebb83fe8ee261b6ac18adf44f0e))
-
-## [1.1.0](https://github.com/christophehurpeau/yarn-why-duplicate/compare/v1.0.0...v1.1.0) (2023-04-25)
-
-
-### Features
-
-* force 1.1.0 ([d333635](https://github.com/christophehurpeau/yarn-why-duplicate/commit/d3336353ffe709910577310116dab70dd8f25f5c))
-
-## 1.0.0 (2023-04-25)
-
-
-### Features
-
-* **deps:** update dependency semver to v7.5.0 ([#4](https://github.com/christophehurpeau/yarn-why-duplicate/issues/4)) ([f9eee30](https://github.com/christophehurpeau/yarn-why-duplicate/commit/f9eee30e153dea0dc8dabb69b2484dd6dd3be0dc))
-* first commit ([c3a6354](https://github.com/christophehurpeau/yarn-why-duplicate/commit/c3a6354ae139baffc75c4582af439db4f496329c))
-
-
-### Bug Fixes
-
-* add try/catch on compareRange ([357eed7](https://github.com/christophehurpeau/yarn-why-duplicate/commit/357eed715012b156d4abd447f9d7232fdc066d72))
-* use virtuals ([340d56a](https://github.com/christophehurpeau/yarn-why-duplicate/commit/340d56a8abc6c81b9973ed5ecb80604e6905990b))
-* virtual child ([8798439](https://github.com/christophehurpeau/yarn-why-duplicate/commit/8798439ccf4f7ee40292ce9fb734e573a37c1d71))

package/lib/.eslintrc.json

@@ -1,4 +0,0 @@
-{
-  "root": true,
-  "extends": ["@pob/eslint-config/node-module"]
-}

package/scripts/check-package.js

@@ -1,3 +0,0 @@
-import { createCheckPackage } from 'check-package-dependencies';
-
-await createCheckPackage().checkRecommended({}).run();